F5 Networks BIG-IP : Appliance mode iControl REST vulnerability (K13325942)

high Nessus Plugin ID 167738

Language:

Version 1.10 May 10, 2024, 12:25 PM IAVM reference Plugin Feed: 202405101225
Version 1.9 Mar 18, 2024, 11:30 PM Plugin metadata Plugin Feed: 202403182330
Version 1.8 Nov 2, 2023, 6:19 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202311021819
Version 1.8 Mar 18, 2024, 9:25 PM Plugin metadata Plugin Feed: 202403182125
Version 1.6 Mar 21, 2023, 7:30 PM Plugin metadata Plugin Feed: 202303211930
Version 1.5 Feb 3, 2023, 12:10 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202302031210
Version 1.4 Dec 13, 2022, 2:03 PM CVSS metrics ("CVSSv2 score" changed from "3.2" to "7.7") CVSS metrics ("CVSSv2 vector" changed from "CVSS2#AV:L/AC:L/Au:S/C:P/I:P/A:N" to "CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:N") CVSSv2 severity (based on CVE-2022-41800, severity increased from "Low" to "High") Exploit attributes ("Exploit available" changed from "True" to "False") Plugin Feed: 202212131403
Version 1.3 Nov 24, 2022, 4:13 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploit framework metasploit" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202211241613
Version 1.2 Nov 16, 2022, 9:51 PM New Plugin Feed: 202211162151

* Changelogs are generally available for changes made after Nov 1, 2022